Security & Audit Notice

DR.CORD is designed so clinically and operationally meaningful actions can be attributed to a user, clinic, role, branch, and workflow context where available.

Auditable activity may include patient registration, queue activity, consultation updates, prescription actions, lab reports, billing events, pharmacy dispense, inventory movements, document uploads, consent acceptance, sync recovery, and administrative changes.

The platform may monitor runtime health, background jobs, sync queues, device mode, storage pressure, hydration state, lock state, subscription recovery, upload queues, and notification delivery state.

Monitoring supports reliability, incident response, support, and patient-safety-oriented operations.

DR.CORD uses authentication, clinic scoping, role and capability checks, tenant-aware data paths, local schema validation, idempotency keys, transaction journals, operational locks, and event replay safeguards.

No software can eliminate all security risk. Clinics must maintain device security, staff training, access review, password hygiene, and incident escalation processes.

Sessions may persist locally to protect workflow continuity. On shared or public devices, users must log out and lock the workstation after use.

Suspended users, revoked licenses, inactive clinics, and permission changes may terminate or restrict access.